Data Processing Agreement

If you use Bloffee to process personal data (for example, personal data contained in content you ask us to generate, or personal data about your own end-readers), Be-Found acts as a data processor on your behalf, and you act as the data controller, under the GDPR/AVG.

Current status

Be-Found is currently in the process of incorporation in the Netherlands (“in oprichting”). Because of this, we are not yet able to countersign a formal, bilateral Data Processing Agreement under a registered company name and KVK number. We want to be upfront about this rather than publish a document that isn’t yet legally executable.

What we commit to

• As soon as incorporation is complete, we will make a full, signable Data Processing Agreement (compliant with Article 28 GDPR) available on request, at no extra cost, to any customer who needs one for their own compliance records.
• In the meantime, if your compliance process requires written data-processing terms today, contact us at coffee@bloffee.com and we will work with you directly on an interim written arrangement.

Summary of processing, in the meantime

• Subject matter: hosting, generating, and publishing blog content on your behalf.
• Duration: for as long as your Bloffee account is active, plus any legally required retention period afterward.
• Nature and purpose: automated content generation (via third-party AI providers), storage, and publication of blog content associated with your account.
• Types of personal data: typically limited to author/brand names and contact details you choose to include in generated content; we do not require you to submit sensitive personal data, and we ask that you avoid doing so.
• Categories of data subjects: your own staff, authors, or end-customers, to the extent you include information about them in content you ask us to generate.

Sub-processors

We use the following categories of sub-processors to deliver the Service: payment processing (Stripe), email delivery (Resend), media hosting (Cloudinary), cloud infrastructure (Railway), and AI content generation (OpenAI and/or Anthropic). We will notify customers of material changes to this list where we are contractually required to do so.

Security

We apply reasonable technical and organizational measures appropriate to the nature of the data we process, and we will notify affected customers without undue delay in the event of a data breach affecting their data.

Contact

To request a copy of our data-processing terms, or to discuss your specific compliance needs: coffee@bloffee.com.